Glossary

API access requests

API access is the page in the SharePoint admin center where a deployed package's permission requests wait for approval. Two fields decide how much you are granting: the resource (whose API) and the scope (what it may do there).

A request against Microsoft Graph reaches your Microsoft 365 data. A request against a vendor's own API only lets the component obtain a token addressed to that vendor, and grants nothing over your tenant. Both look identical in shape.

Approvals here are tenant-wide, not per site, and a package cannot acquire new permissions silently: a new request appears as pending and has no effect until an administrator approves it.

All terms